[Freeipa-devel] [PATCH] 0127 Map NT_STATUS_INVALID_PARAMETER to a most likely error cause

2013-11-12 Thread Alexander Bokovoy
Hi, I stumbled upon another case of clock skew breaking trust-add code and in this case we actually get a separate error code -- NT_STATUS_INVALID_PARAMETER that, along with a specific case we get it in, allows to deduce that there is a possible clock skew without parsing debug output from Samba

Re: [Freeipa-devel] [PATCHES] 0080-0081 Add userClass attributes for users and hosts

2013-11-12 Thread Ana Krivokapic
On 10/30/2013 09:56 PM, Martin Kosek wrote: - Original Message - From: Simo Sorce s...@redhat.com To: Ana Krivokapic akriv...@redhat.com Cc: Martin Kosek mko...@redhat.com, freeipa-devel freeipa-devel@redhat.com Sent: Wednesday, October 30, 2013 7:11:20 PM Subject: Re:

Re: [Freeipa-devel] [PATCHES] 0019-0020 Broken Firefox configuration files in freeipa-client package

2013-11-12 Thread Martin Basti
On Fri, 2013-11-08 at 16:28 +0100, Petr Vobornik wrote: On 11/05/2013 10:34 AM, Martin Basti wrote: ipa-client-install now allows to configure firefox using --configure-firefox option and optionally with --firefox-dir=INSTALL_DIR option. Old configuration files was removed. Patches

[Freeipa-devel] [PATCH] 0021 Documentation error in FreeIPA guide Setting up a Kerberized NFS Server

2013-11-12 Thread Martin Basti
One liner, missing example added. https://fedorahosted.org/freeipa/ticket/3997 -- Martin^2 Basti From 2328a853fa6b2607ddad092f9fb77c791ecfcbe9 Mon Sep 17 00:00:00 2001 From: Martin Basti mba...@redhat.com Date: Tue, 12 Nov 2013 14:06:38 +0100 Subject: [PATCH] Added missing example in setting up

[Freeipa-devel] [PATCH] 0085 Fix regression which prevents creating a winsync agreement

2013-11-12 Thread Ana Krivokapic
Hello, This patch should fix the regression introduced by the original fix for ticket https://fedorahosted.org/freeipa/ticket/3989. -- Regards, Ana Krivokapic Associate Software Engineer FreeIPA team Red Hat Inc. From 43309fd81f2ac2b46fb1908c79aef2d77fdf39ca Mon Sep 17 00:00:00 2001 From: Ana

Re: [Freeipa-devel] [PATCH] 0127 Map NT_STATUS_INVALID_PARAMETER to a most likely error cause

2013-11-12 Thread Alexander Bokovoy
On Tue, 12 Nov 2013, Alexander Bokovoy wrote: Hi, I stumbled upon another case of clock skew breaking trust-add code and in this case we actually get a separate error code -- NT_STATUS_INVALID_PARAMETER that, along with a specific case we get it in, allows to deduce that there is a possible

Re: [Freeipa-devel] Internationalized domain names in freeIPA

2013-11-12 Thread Alexander Bokovoy
On Thu, 07 Nov 2013, Martin Basti wrote: On Tue, 2013-11-05 at 18:04 +0100, Petr Viktorin wrote: On 11/05/2013 05:53 PM, John Dennis wrote: On 11/05/2013 11:13 AM, Martin Basti wrote: Hi list, I'm working on ticket: https://fedorahosted.org/freeipa/ticket/3169 UTF-8 DNS names will be

[Freeipa-devel] [PATCH 0206] Publish zones only after all LDAP events have been processed

2013-11-12 Thread Petr Spacek
Hello, Publish zones only after all LDAP events have been processed. Zones are not exposed in _default DNS view until all events generated before LDAP intermediate message have been processed. This prevents BIND from returning NXDOMAIN for some names from a zone but NOERROR answers for other

Re: [Freeipa-devel] [PATCH 0202-0203] Improve performance of initial LDAP synchronizationDetect end of initial LDAP synchronization phase

2013-11-12 Thread Petr Spacek
On 5.11.2013 12:29, Tomas Hozza wrote: - Original Message - Hello, Improve performance of initial LDAP synchronization. Changes are not journaled and SOA serial is not incremented during initial LDAP synchronization. This eliminates unnecessary synchronous writes to journal and also

Re: [Freeipa-devel] [PATCH] 0127 Map NT_STATUS_INVALID_PARAMETER to a most likely error cause

2013-11-12 Thread Ana Krivokapic
On 11/12/2013 10:41 AM, Alexander Bokovoy wrote: +-1073741811: # NT_STATUS_INVALID_PARAMETER +error.RemoteRetrieveError( ^ should be errors +reason=_('AD domain controller complains about communication sequence. It may mean unsynchronized time on both

Re: [Freeipa-devel] [PATCH] 0127 Map NT_STATUS_INVALID_PARAMETER to a most likely error cause

2013-11-12 Thread Alexander Bokovoy
On Tue, 12 Nov 2013, Ana Krivokapic wrote: On 11/12/2013 10:41 AM, Alexander Bokovoy wrote: +-1073741811: # NT_STATUS_INVALID_PARAMETER +error.RemoteRetrieveError( ^ should be errors +reason=_('AD domain controller complains about communication sequence.

[Freeipa-devel] [PATCH 0025] Add support to ipa-kdb for keyless principals

2013-11-12 Thread Nathaniel McCallum
https://fedorahosted.org/freeipa/ticket/3779 From 8806c71c1925b697103fb21df4f937a7a05be74c Mon Sep 17 00:00:00 2001 From: Nathaniel McCallum nathan...@themccallums.org Date: Tue, 12 Nov 2013 10:52:51 -0500 Subject: [PATCH] Add support to ipa-kdb for keyless principals

Re: [Freeipa-devel] [PATCH] 0127 Map NT_STATUS_INVALID_PARAMETER to a most likely error cause

2013-11-12 Thread Ana Krivokapic
On 11/12/2013 04:55 PM, Alexander Bokovoy wrote: On Tue, 12 Nov 2013, Ana Krivokapic wrote: On 11/12/2013 10:41 AM, Alexander Bokovoy wrote: +-1073741811: # NT_STATUS_INVALID_PARAMETER +error.RemoteRetrieveError( ^ should be errors +reason=_('AD domain

Re: [Freeipa-devel] [PATCH] 0085 Fix regression which prevents creating a winsync agreement

2013-11-12 Thread Nathaniel McCallum
On Tue, 2013-11-12 at 14:56 +0100, Ana Krivokapic wrote: Hello, This patch should fix the regression introduced by the original fix for ticket https://fedorahosted.org/freeipa/ticket/3989. ACK ___ Freeipa-devel mailing list

Re: [Freeipa-devel] [PATCH] 0021 Documentation error in FreeIPA guide Setting up a Kerberized NFS Server

2013-11-12 Thread Nathaniel McCallum
On Tue, 2013-11-12 at 14:12 +0100, Martin Basti wrote: One liner, missing example added. https://fedorahosted.org/freeipa/ticket/3997 ACK ___ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel